CVE-2014-9152 on Unsafe.dll dependency with Elastic Search

https://nvd.nist.gov/vuln/detail/CVE-2014-9152

Hi, I have performed recent dependency scan and found the above CVE vulnerability is detected. As i am using Elastic Search .net dll in my project and this has indirect dependency with System.Runtime.CompilerServices.Unsafe.dll hence the CVE is being listed in the reported. We tried removing this Unsafe.dll but its affecting Elasticsearch. Even i tried uninstalling and re-installing Elastic Search .net dll but its also installing Unsafe.dll.

Seeking your advise on remediating this vulnerability.

Thanks in advance.

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.